# Azure Compliance

> Azure Compliance is an officially published skill from Microsoft. Anomity scores its risk at 20 out of 100 (low).

- **Canonical URL:** https://catalog.anomity.ai/skill/azure-compliance
- **Kind:** Skill
- **Publisher:** Microsoft
- **Trust level:** official
- **Risk score:** 20/100 (low)
- **Website:** https://github.com/microsoft
- **Last updated:** 2026-09-02
- **JSON:** https://catalog.anomity.ai/api/entries/skill/azure-compliance

## Description

Audits Azure compliance posture and monitors Key Vault expiry — surfacing misconfigured resources and secrets approaching their rotation date before they fail in production.

Declared capabilities are outbound network and credential access. Note the subtlety worth catching: monitoring Key Vault means the skill enumerates secret metadata — names, expiry, versions — not secret values. That distinction is the whole security argument for allowing it, and it is worth verifying in the skill's own implementation rather than assuming, because the two API calls sit next to each other.

## Why it scored 20

The score starts at the catalog's neutral base of 50 and moves only through the signals below. The formula is published at https://catalog.anomity.ai/about — there is no model and no hidden heuristic.

| Signal | Contribution | Severity | Evidence |
| --- | --- | --- | --- |
| Published by the vendor | -40 | trust offset |  |
| 1 high-risk capability: credentials:access | +10 | high |  |

Clamped result: **20/100**, band **low**.

## Capabilities

| Capability | Name | Security implication |
| --- | --- | --- |
| `network:outbound` | Outbound network | Can make outbound network requests. Required for hosted model providers and remote APIs; also the path for data exfiltration if combined with read access. |
| `credentials:access` | Credentials access | Reads provider API keys, OAuth tokens, or other secrets from the host keychain or environment. |

## Related skills

- [Azure Deploy](https://catalog.anomity.ai/skill/azure-deploy) — risk 45 (medium)
- [Azure Diagnostics](https://catalog.anomity.ai/skill/azure-diagnostics) — risk 45 (medium)
- [Azure Cost](https://catalog.anomity.ai/skill/azure-cost) — risk 20 (low)
- [Cloudflare One](https://catalog.anomity.ai/skill/cloudflare-one) — risk 20 (low)
- [Convex Advisor](https://catalog.anomity.ai/skill/convex-advisor) — risk 20 (low)
- [ElevenLabs Agents](https://catalog.anomity.ai/skill/elevenlabs-agents) — risk 20 (low)

---

Source: Anomity Catalog (https://catalog.anomity.ai/). Scoring methodology: https://catalog.anomity.ai/about. Machine-readable index: https://catalog.anomity.ai/llms.txt · https://catalog.anomity.ai/openapi.json